Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) does not properly manage sessions, which allows remote attackers to read/send mail or change the configuration via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Debun_imap | Neo | * | 3.3i_r4.0 (including) |
| Debun_pop | Neo | * | 3.3p_r4.0 (including) |
References
- http://jvn.jp/en/jp/JVN00344155/index.html
- https://www.denbun.com/en/imap/support/security/181003.html
- https://www.denbun.com/en/pop/support/security/181003.html
- http://jvn.jp/en/jp/JVN00344155/index.html
- https://www.denbun.com/en/imap/support/security/181003.html
- https://www.denbun.com/en/pop/support/security/181003.html